Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136332e302f32342d3234203d3e20323633393735.roa
File:                     3133382e3235352e3136332e302f32342d3234203d3e20323633393735.roa (raw, json)
Hash identifier:          QeFy7cYl0XnlcH1ZGkwal06H9BHk388j5lSYQqT27k8=
Subject key identifier:   F0:AE:32:BD:07:88:2D:8E:91:F1:04:9E:48:A0:79:63:B7:8A:70:60
Certificate issuer:       /CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Certificate serial:       7795468BF96F370637B42AC49E19A58F7A78A5C4
Authority key identifier: D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136332e302f32342d3234203d3e20323633393735.roa
Signing time:             Mon 07 Oct 2024 19:10:37 +0000
ROA not before:           Mon 07 Oct 2024 19:05:37 +0000
ROA not after:            Mon 06 Oct 2025 19:10:37 +0000
asID:                     263975
IP address blocks:        138.255.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl
                          rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:95:46:8b:f9:6f:37:06:37:b4:2a:c4:9e:19:a5:8f:7a:78:a5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
        Validity
            Not Before: Oct  7 19:05:37 2024 GMT
            Not After : Oct  6 19:10:37 2025 GMT
        Subject: CN=F0AE32BD07882D8E91F1049E48A07963B78A7060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:08:fd:95:da:6e:b6:4c:ae:68:ff:b6:8e:76:
                    c8:4a:fb:8e:8d:33:8c:8f:dd:cb:0d:7e:59:f5:60:
                    df:c8:d7:db:a2:e4:ea:8f:21:4b:61:94:96:5d:53:
                    0d:0b:e1:4f:aa:c6:db:82:56:f2:d4:6e:5b:9a:af:
                    82:d8:e3:70:c9:d1:56:b4:72:84:07:dd:42:6f:6b:
                    1c:17:f4:85:2a:76:52:e9:91:df:66:e2:b8:4f:c1:
                    19:22:2f:80:cb:fb:67:ca:8a:09:44:e4:f9:69:4e:
                    55:84:6c:35:b5:a4:cc:18:7c:a6:9d:c5:e3:b4:c5:
                    91:ee:ee:b4:f5:a6:89:49:f0:28:64:f8:8c:8d:59:
                    56:ca:f1:1a:ff:dd:0d:55:d0:13:25:6b:19:d7:62:
                    da:5f:86:b6:4e:66:e3:42:78:20:55:c4:65:d0:ab:
                    f7:9c:96:46:9a:6d:ef:48:7b:37:b4:b5:d3:80:ee:
                    d3:54:b1:35:f6:81:4e:c4:c9:b6:8e:a5:6e:84:e9:
                    3d:dc:69:16:53:fa:6a:8a:a0:98:40:b6:81:4b:06:
                    36:ad:6d:20:d1:81:d0:29:13:bf:e9:c7:1e:18:39:
                    26:d3:80:98:7b:b1:d8:94:fa:9d:b3:a5:3d:26:60:
                    7c:59:4f:33:79:32:02:d9:3c:57:47:e4:9e:be:4b:
                    cd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AE:32:BD:07:88:2D:8E:91:F1:04:9E:48:A0:79:63:B7:8A:70:60
            X509v3 Authority Key Identifier:
                keyid:D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136332e302f32342d3234203d3e20323633393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:6c:e9:f1:30:72:74:4b:45:d7:e5:29:eb:71:c5:0d:04:23:
         c4:6d:2d:54:6f:67:8e:66:a8:74:53:f4:30:32:6d:f9:f6:f9:
         dc:c3:ae:de:07:43:9d:0d:e8:97:c9:d0:54:4b:71:bb:51:b5:
         94:40:f8:65:bf:a5:0e:87:95:ca:12:a5:95:01:8e:58:92:5c:
         5a:d5:73:c5:98:40:28:9b:f6:1c:ad:52:3b:36:20:9a:3d:e7:
         3c:21:f2:1d:20:47:24:da:d1:42:66:1e:04:b1:a8:83:bb:41:
         bc:23:70:23:61:20:f3:2d:cf:66:39:9c:f9:53:17:bf:cb:68:
         13:73:6d:3d:c3:ae:f7:43:95:55:44:e0:8a:33:38:2d:8f:b7:
         b5:15:e5:46:75:ae:34:4d:1b:4c:fa:73:80:ec:83:f0:66:ca:
         41:09:d5:c4:c2:09:fe:35:0a:29:41:7d:f3:9a:a3:b8:aa:80:
         31:0c:76:03:05:f3:4e:5c:f2:58:fd:62:d5:d9:64:b4:d0:9f:
         b9:a5:b9:6b:bd:ce:ee:3d:4f:dc:ff:4e:73:ea:b3:cc:d9:f1:
         ff:fe:6e:d9:a5:27:bd:50:9c:91:b2:70:d7:2e:c9:1b:b3:1e:
         f8:e0:94:4c:a7:0f:ed:1f:f2:3a:9f:46:c6:2a:4f:40:f8:ba:
         cc:44:dc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:51 2024 by rpki-client on console-fra.rpki-client.org